CVE-2021-3610

ImageMagick: heap-based buffer overflow in ReadTIFFImage() in coders/tiff.c

Loading…

Severity

Low

Red Hat Product Security

5.3

CVSS 3.1

Review impact separately from score.

Published · May 27, 2021

Updated · January 27, 2026

Description

A heap-based buffer overflow vulnerability was found in ImageMagick in ReadTIFFImage() in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault.

Statement

All versions of ImageMagick shipped in Red Hat Enterprise Linux 5, 6, and 7 are not affected by this flaw as they do not contain vulnerable code. The vulnerable code was introduced in a subsequent version of ImageMagick.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-787 · Out-of-bounds Write